HCE3-SA-2025-0013 Important HCE 3.0 Security Fix(es): An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal. (CVE-2023-39810) In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. (CVE-2025-46394) HCE 3.0 busybox-1.36.1-8.r9.hce3.x86_64.rpm busybox-help-1.36.1-8.r9.hce3.x86_64.rpm busybox-1.36.1-8.r9.hce3.aarch64.rpm busybox-help-1.36.1-8.r9.hce3.aarch64.rpm